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DETAILED ACTION 

1 . Claims 1-66 have been examined. 

2. The lengthy specification has not been checked to the extent necessary to 
determine the presence of all possible minor errors. Applicant's cooperation is 
requested in correcting any errors of which applicant may become aware in the 
specification. 

Priority 

3. The priority date for the subject matter defined in the pending claims in this 
application is 09/08/2000. 

Drawings 

4. Figures 1-3 should be designated by a legend such as -Prior Art- because only 
that which is old is illustrated. See MPEP § 608.02(g). Corrected drawings in 
compliance with 37 CFR 1 .121(d) are required in reply to the Office action to avoid 
abandonment of the application. The replacement sheet(s) should be labeled 
"Replacement Sheet" in the page header (as per 37 CFR 1 .121(d)) so as not to obstruct 
any portion of the drawing figures. If the changes are not accepted by the examiner, the 
applicant will be notified and informed of any required corrective action in the next Office 
action. The objection to the drawings will not be held in abeyance. 

Double Patenting 

5. The nonstatutory double patenting rejection is based on a judicially created 
doctrine grounded in public policy (a policy reflected in the statute) so as to prevent the 
unjustified or improper timewise extension of the "right to exclude" granted by a patent 
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and to prevent possible harassment by multiple assignees. See In re Goodman, 1 1 
F.3d 1046, 29 USPQ2d 2010 (Fed. Cir. 1993); In re Long!, 759 F.2d 887, 225 
USPQ 645 (Fed. Cir. 1985); In re Van Ornum, 686 F.2d 937, 214 USPQ 761 (CCPA 
1982); In re Vogel, 422 F.2d 438. 164 USPQ 619 (CCPA 1970);and, In re Thorington, 
418 F.2d 528, 163 USPQ 644 (CCPA 1969). 

A timely filed terminal disclaimer in compliance with 37 CFR 1 .321(c) may be 
used to overcome an actual or provisional rejection based on a nonstatutory double 
patenting ground provided the conflicting application or patent is shown to be commonly 
owned with this application. See 37 CFR 1.130(b). 

Effective January 1 . 1994, a registered attorney or agent of record may sign a 
terminal disclaimer. A terminal disclaimer signed by the assignee must fully comply with 
37 CFR 3.73(b). 

6. Claims 1-66 are provisionally rejected under the judicially created doctrine of 
obviousness-type double patenting as being unpatentable over claims 1-64 of 
copending Application No. 09/930.141. Although the conflicting claims are not identical, 
they are not patentably distinct from each other because the limitations of copending 
Application No. 09/930,142 is overlapping the limitation of copending Application No. 
09/930.141. 

This is a provisional obviousness-type double patenting rejection because the 
conflicting claims have not in fact been patented. 
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Claim Rejections - 35 USC § 102 

7. The following is a quotation of the appropriate paragraphs of 35 U.S.C, 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

8. Claims 1-66 are rejected under 35 U.S.C. 102(e) as being anticipated by Conklin 
et al. (U.S. 5,991 ,881 ), hereinafter referred to as Conklin et al. 

9. Regarding claim 1 , Conklin et al. disclose a method for service addressing, the 
method comprising: 

• Receiving a data packet, the data packet including a data packet service address 
(col. 7, lines 44-50 and col. 3, lines 3-14); 

• Accessing a service definition database, the service definition database including 
a plurality of service definition records, each of at least a subset of the plurality of 
service definition records including 

o A service address field to store a service address (col. 3, lines 3-14 and 
col. 4, lines 61-67), and 

o A plurality of network application entries, each of at least a subset of the 
plurality of network application entries corresponding to a network 
application (col. 3, lines 3-14 and col. 4, lines 61-67); and 



Application/Control Number: 09/930.142 Page 5 

Art Unit: 2142 

• Identifying a service definition record having a service address corresponding to 
the data packet service address, the identified service definition record including 
a plurality of identified network application entries, the plurality of identified 
network application entries including a first identified network application entry 
corresponding to a first network application and a second identified network 
application entry corresponding to a second network application, the first network 
application being different from the second network application (col. 4, lines 61- 
67 and Fig. 9). 

10. Regarding claim 2, in accordance with claim 1, Conklin et al. disclose the method 
wherein the first network application is a first version of a particular network application 
and the second network application is a second version of a particular network 
application (see Fig. 9), 

1 1 . Regarding claim 3, in accordance with claim 2, Conklin et al. disclose the method 
wherein the first version of the particular network application is from a first vendor, the 
second version of the particular network application is from the second vendor, and the 
first vendor is different from the second vendor (see Fig. 9). 

12. Regarding claim 4, in accordance with claim 2, Conklin et al. disclose the method 
wherein the particular network application is selected from the group consisting of an 
intrusion detection application, a virus detection application, a firewall application, a web 
switch, a network security application, and a load balancing application (col. 1, lines 11- 
20 and col. 3, lines 36-42). 
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13. Regarding claim 5, in accordance with claim 1 , Conklin et al. disclose the method 
wherein: 

• The first network application is selected from the group consisting of an intrusion 
detection application, a virus detection application, a firewall application, a web 
switch, a network security application, and a load balancing application (col. 1, 
lines 1 1-20 and col. 3, lines 36-42); and 

• The second network application is a different network application selected from 
the group consisting of an intrusion detection application, a virus detection 
application, a load balancing application, a virtual private network application, a 
firewall application, a web switch, a network security application, a proxy 
application, and a database application (col. 1, lines 11-20 and col. 3, lines 36- 
42). 

14. Regarding claim 6, in accordance with claim 1, Conklin et al. disclose the method 
wherein: 

• Receiving a data packet includes receiving a data packet having a data packet 
service port identifier (col. 7, lines 44-50); and 

• Each of at least the subset of the plurality of network application entries includes 
a service port identifier field to store a service port identifier (col. 3, lines 3-14). 

15. Regarding claim 7, in accordance with claim 6, Conklin et al. disclose the method 
further comprising: 
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^ 

• Selecting a network application entry of the identified service definition record 
based at least in part on the data packet service port identifier (col. 4, lines 61- 
67). 

16. Regarding claim 8, in accordance with claim 1, Conklin et al. disclose the method 
wherein: 

• Receiving a data packet includes receiving the data packet via a first network 
interface (col. 7, lines 44-50); and 

• Each of at least the subset of the plurality of network application entries includes 
a received network interface field to store a received network interface identifier 
(col. 3, lines 3-14). 

17. Regarding claim 9, in accordance with claim 8, Conklin et al. disclose the method 
further comprising: 

• Determining a data packet received network interface identifier based at least in 
part on receiving the data packet via the first network interface (col. 7, lines 44- 
50); and 

• Selecting a network application entry of the identified service definition record 
based at least in part on the data packet received network interface identifier (col. 
4. lines 52-67). 

18. Regarding claim 10, in accordance with claim 7, ConkHn et al. disclose the 
method wherein: 

• Receiving a data packet includes receiving the data packet via a first network 
interface (col. 7, lines 44-50); and 
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• Each of at least the subset of the plurality of network application entries includes 
a received network interface field to store a received network interface identifier 
(col. 3, lines 3-14). 

19. Regarding claim 1 1, in accordance with claim 10, Conklin et al. disclose the 
method further comprising: 

• Determining a data packet received network interface identifier based at least in 
part on receiving the data packet via the first network interface (col. 7, lines 44-50 
and col. 3, lines 3-14); and 

• Selecting a network application entry of the identified service definition record 
based at least in part on the data packet received network interface identifier (col. 
4, lines 52-67). 

20. Regarding claim 12, in accordance with claim 1 , Conklin et al. disclose the 
method wherein each of at least the subset of the plurality of network application entries 
includes a send via network interface field to store a send via network interface identifier 
(col. 3, lines 3-14). 

21 . Regarding claim 13, in accordance with claim 1 , Conklin et al. disclose the 
method wherein each of at least the subset of the plurality of network application entries 
includes a source address field to store a source address (col. 3, lines 3-14). 

22. Regarding claim 14, in accordance with claim 1 , Conklin et al. disclose the 
method wherein each of at least the subset of the plurality of network application entries 
includes a destination logical address field to store a destination logical address (col. 3, 
lines 3-14). 
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23. Regarding clainn 15, in accordance with claim 13, Conklin et al. disclose the 
method wherein the destination logical address field to store a destination logical 
address is a destination internet protocol address field to store a destination internet 
protocol address (col. 2, line 64 - col. 3, line 14). 

24. Regarding claim 16, in accordance with claim 1, Conklin et al. disclose the 
method wherein each of at least the subset of the plurality of network application entries 
includes a network application send address field to store a network application send 
address (col. 3, lines 3-14). 

25. Regarding claim 17, in accordance with claim 16, Conklin et al. disclose the 
method wherein the network application send address field to store a network 
application send address is a network application physical address field to store a 
network application physical address (col. 2, line 64 - col. 3, line 14). 

26. Regarding claim 18, in accordance with claim 17, Conklin et al. disclose the 
method wherein the network application physical address field to store a network 
application physical address is a network application media access controller address 
field to store a media access controller address (col. 2, line 64 - col. 3, line 14). 

27. Regarding claim 19, in accordance with claim 16, Conklin et al. disclose the 
method wherein the network application send address field to store a network 
application send address is a network application send logical address field to store a 
network application send logical address (col. 2, line 64 - col. 3, line 14). 

28. Regarding claim 20, Conklin et al. disclose a method for service addressing, the 
method comprising: 
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• Receiving a data packet, the data packet including a service address and a 
service port identifier (col. 7, lines 44-50 and col. 3, lines 3-14); 

• Identifying a bundle of network applications based at least in part on the service 
address, the bundle of network applications including at least a first network 
application and a second network application, the first network application being 
different from the second network application (col. 7, lines 55-61); 

• Selecting the first network application based at least in part on the service port 
identifier (col. 3, lines 3-14); and 

• Sending at least a portion of the data packet to the first network application (col. 
7, lines 44-50). 

29. Regarding claim 21 , in accordance with claim 20, Conklin et al. disclose the 
method wherein: 

• Receiving a data packet includes receiving the data packet via a first network 
interface (col. 7, lines 44-50 and col. 3, lines 3-14); and 

• Selecting the first network application based at least in part on the service port 
identifier includes selecting the first network application based at least in part on 
the service port identifier and the first network interface (col. 3, lines 3-14). 

30. Regarding claim 22, in accordance with claim 20, Conklin et al. disclose the 
method wherein: 

• Receiving a data packet includes: 

o Receiving the data packet via a first network interface (col. 7, lines 44-50), 
and 
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o Determining a data packet received network interface identifier based at 
least in part on receiving the data packet via the first network interface 
(col. 3, lines 3-14); and 

• Selecting the first network application based at least in part on the service port 
identifier includes selecting the first network application based at least in part on 
the service port identifier and the data packet received network interface identifier 
(col. 2, line 64 - col. 3, line 14). 

31 . Regarding claim 23, in accordance with claim 20, Conklin et al. disclose the 
method wherein the first network application is a first implementation of a particular 
network application and the second network application is a second implementation of a 
particular network application (see Fig. 9). 

32. Regarding claim 24, in accordance with claim 23, Conklin et al. disclose the 
method wherein the particular network application is selected from the group consisting 
of an intrusion detection application, a virus detection application, a load balancing 
application, a virtual private network application, a firewall application, a web switch, a 
network security application, a proxy application, and a database application (col. 1 , 
lines 1 1-20 and col. 3, lines 36-42). 

33. Regarding claim 25, Conklin et al. disclose a system for service addressing, the 
system comprising: 

• A first network interface to receive a data packet, the data packet including a 
data packet service address (col. 7, lines 44-50 and col. 3, lines 3-14); and 
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• Service addressing logic, the service addressing logic coupled to the first network 
interface, the service addressing logic including a plurality of service definition 
records, each of at least a subset of the plurality of service definition records 
including 

o A service address field to store a service address (col. 3, lines 3-14), and 
o . A plurality of network application entries, each of at least a subset of the 
plurality of network application entries corresponding to a network 
application, the plurality of network application entries including a first 
network application entry and a second network application entry, the first 
network application entry corresponding to a first network application, the 
second network application entry corresponding to a second network 
application, the first network application being different from the second 
network application (col, 4, lines 52-67). 

34. Regarding claim 26, in accordance with claim 25, Conklin et al. disclose the 
system wherein the first network application is a first version of a particular network 
application and the second network application is a second version of a particular 
network application (see Fig, 9). 

35, Regarding claim 27, in accordance with claim 26, Conklin et al. disclose the 
system wherein the particular network application is selected from the group consisting 
of an intrusion detection application, a virus detection application, a firewall application, 
a web switch, a network security application, and a load balancing application (col. 1, 
lines 1 1-20 and col. 3, lines 36-42). 
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36. Regarding claim 28, in accordance with claim 25, Conklin et al. disclose the 
system wherein: 

• The first network application is selected from the group consisting of an intrusion 
detection application, a virus detection application, a firewall application, a web 
switch, a network security application, and a load balancing application (col. 1, 
lines 1 1-20 and col. 3, lines 36-42); and 

• The second network application is a different network application selected from 
the group consisting of an intrusion detection application, a virus detection 
application, a load balancing application, a virtual private network application, a 
firewall application, a web switch, a network security application, a proxy 
application, and a database application (col. 1, lines 11-20 and col. 3, lines 36- 
42), 

37. Regarding claim 29, in accordance with claim 25, Conklin et al. disclose the 
system wherein: 

• The data packet includes a data packet service port identifier (col. 3, lines 3-14); 
and 

• Each of at least a subset of the plurality of network application entries includes a 
service port identifier field to store a service port identifier (col. 3, lines 3-14). 

38. Regarding claim 30, in accordance with claim 29, Conklin et al. disclose the 
system further comprising: 



Application/Control Number: 09/930,142 Page 14 

Art Unit: 2142 

• Means for selecting a network application entry of the identified service definition 
record based at least in part on the data packet service port identifier (col. 3, 
lines 3-14), 

39. Regarding claim 31 , in accordance with claim 25, Conklin et al. disclose the 
system wherein: 

• Each of at least the subset of the plurality of network application entries includes 
a received network interface field to store a received network interface identifier 
(col. 2, line 64 - col. 3, line 14). 

40. Regarding claim 32, in accordance with claim 31 , Conklin et al. disclose the 
system further comprising: 

• Means for determining a data packet received network interface identifier based 
at least in part on receiving the data packet via the first network interface (col. 3, 
lines 3-14 and col. 7, lines 44-50); and 

• Means for selecting a network application entry of the identified service definition 
record based at least in part on the data packet received network interface 
identifier (col. 3, lines 3-14). 

41 . Regarding claim 33, in accordance with claim 29, Conklin et al. disclose the 
system wherein: 

• Each of at least the subset of the plurality of network application entries includes 
a received network interface field to store a received network interface identifier 
(col. 2, line 64 -col. 3, line 14). 
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42. Regarding clainn 34, in accordance with claim 33, Conklin et al. disclose the 
system further comprising: 

• Means for determining a data packet received network interface identifier based 
at least in part on receiving the data packet via the first network interface (col. 3, 
lines 3-14 and col. 7, lines 44-50); and 

• Means for selecting a network application entry of the identified service definition 
record based at least in part on the data packet received network interface 
identifier (col. 3, lines 3-14). 

43. Regarding claim 35, in accordance with claim 33, Conklin et al. disclose the 
system wherein each of at least the subset of the plurality of network application entries 
includes a send via network interface field to store a send via network interface identifier 
(col. 2, line 64 - col. 3, line 14). 

44. Regarding claim 36, in accordance with claim 33, Conklin et al. disclose the 
system wherein each of at least the subset of the plurality of network application entries 
includes a source address field to store a source address (col. 3, lines 3-14). 

45. Regarding claim 37, in accordance with claim 33, Conklin et al. disclose the 
system wherein each of at least the subset of the plurality of network application entries 
includes a destination logical address field to store a destination logical address (col. 3, 
lines 3-14). 

46. Regarding claim 38, in accordance with claim 33, Conklin et al. disclose the 
system wherein each of at least the subset of the plurality of network application entries 
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includes a network application send address field to store a network application send 
address (col. 2. line 64 - col. 3, line 14). 

47. Regarding claim 39, in accordance with claim 38, Conklin et al. disclose the 
system wherein the network application send address field to store a network 
application send address is a network application physical address field to store a 
network application physical address (col. 2, line 64 - col. 3, line 14). 

48. Regarding claim 40, in accordance with claim 39, Conklin et al. disclose the 
system wherein the network application physical address field to store a network 
application physical address is a network application media access controller address 
field to store a media access controller address (col. 2, line 64 - col. 3, line 14). 

49. Regarding claim 41 , in accordance with claim 38, Conklin et al. disclose the 
system wherein the network application send address field to store a network 
application send address is a network application send logical address field to store a 
network application send logical address (col. 2, line 64 - col. 3, line 14). 

50. Regarding claim 42, in accordance with claim 25, Conklin et al. disclose the 
system wherein: 

• The data packet includes a data packet service port identifier (col. 3, lines 3-14); 
and 

• Each of at least a subset of the plurality of network application entries includes: 

o A service port identifier field to store a service port identifier (col. 3, lines 
3-14), 
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o A received network interface field to store a received network interface 

identifier (col. 3, lines 3-14 and coL 4, lines 61-67), 
o A send via network interface field to store a send via network interface 

identifier (col. 3, lines 3-14 and col. 4, lines 61-67), 
o A source address field to store a source address (col. 3, lines 3-14 and 

col. 4, lines 61-67), 
o A destination logical address field to store a destination logical address 

(col. 3, lines 3-14 and col. 4, lines 61-67), and 
o A network application send address field to store a network application 

send address (col. 3, lines 3-14 and col. 4, lines 61-67), 

51 . Regarding claim 43, in accordance with claim 25, Conklin et al. disclose the 
system wherein the data packet uses one or more protocols from one of a TCP/IP 
network protocol suite and a UDP/IP network protocol suite (see Fig. 5, col. 2, line 64 - 
col. 3, line 14). 

52. Regarding claim 44, in accordance with claim 43, Conklin et al. disclose the 
system wherein the one or more protocols include an IPv4 network protocol (see Fig. 5, 
col. 2, line 64 -col. 3, line 14). 

53. Regarding claim 45, in accordance with claim 43, Conklin et al. disclose the 
system wherein the one or more protocols include an IPv6 network protocol (see Fig. 5, 
col. 2, line 64 - col. 3, line 14). 
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54. Regarding claim 46, in accordance with claim 25, Conklin et al, disclose the 
system wherein the data packet uses one or more of a layer 2 protocol, a layer 3 
protocol, and a layer 4 protocol (see Fig. 5, col. 2, line 64 - col. 3, line 14). 

55. Regarding claim 47, in accordance with claim 46, Conklin et al. disclose the 
system wherein the layer 2 protocol is selected from the group consisting of ATM and 
frame relay (see Fig. 5, col. 2, line 64 - col. 3, line 14). 

56. Regarding claim 48, in accordance with claim 46, Conklin et al. disclose the 
system wherein the layer 3 protocol is MPLS (see Fig. 5, col. 2, line 64 - col. 3, line 14). 

57. Regarding claim 49, in accordance with claim 25, Conklin et al. disclose the 
system wherein the service addressing logic lacks information that supports stateful 
processing (see Fig. 5, col. 2, line 64 - col. 3, line 14). 

58. Regarding claim 50, in accordance with claim 25, Conklin et al. disclose the 
system wherein the service addressing logic includes information that supports stateful 
processing (see Fig. 5, col. 2, line 64 - col. 3, line 14). 

59. Regarding claim 51 , in accordance with claim 25, Conklin et al. disclose the 
system wherein the service addressing logic consists essentially of information that 
supports stateless processing (see Fig. 5. col. 2, line 64 - col. 3, line 14). 

60. Regarding claim 52, Conklin et al. disclose a system for service addressing, the 
system comprising: 

• Means for receiving a data packet, the data packet including a service address 
and a service port identifier (col. 7, lines 44-50 and col. 3, lines 3-14); 
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• Means for identifying a bundle of network applications based at least in part on 
the service address, the bundle of network applications including at least a first 
network application and a second network application, the first network 
application being different from the second network application (col. 7, lines 55- 
61); 

• Means for selecting the first network application based at least in part on the 
service port identifier (col. 3, lines 3-14); and 

• Means for sending at least a portion of the data packet to the first network 
application (col. 7, lines 44-50). 

61 . Regarding claim 53, in accordance with claim 52, Conklin et al. disclose the 
system wherein: 

• The means for receiving a data packet includes means for receiving the data 
packet via a first network interface (col. 7, lines 44-50 and col. 3, lines 3-14); and 

• The means for selecting the first network application based at least in part on the 
service port identifier includes means for selecting the first network application 
based at least in part on the service port identifier and the first network interface 
(col. 7, lines 44-50 and col. 3, lines 3-14). 

62. Regarding claim 54, in accordance with claim 52, Conklin et al. disclose the 
system wherein: 

• The means for receiving a data packet includes: 

o means for receiving the data packet via a first network interface (col. 7, 
lines 44-50 and col. 3, lines 3-14), and 
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o means for determining a data packet received network interface identifier 
based at least in part on receiving the data packet via the first network 
interface (col. 7, lines 44-50 and col. 3, lines 3-14); and 

• The means for selecting the first network application based at least in part on the 
service port identifier includes means for selecting the first network application 
based at least in part on the service port identifier and the data packet received 
network interface identifier (col. 7, lines 44-50 and col. 3, lines 3-14). 

63. Regarding claim 55, in accordance with claim 52, Conklin et al. disclose the 
system wherein the first network application is a first implementation of a particular 
network application and the second network application is a second implementation of a 
particular network application (see Fig. 9). 

64. Regarding claim 56, in accordance with claim 55, Conklin et al. disclose the 
system wherein the particular network application is selected from the group consisting 
of an intrusion detection application, a virus detection application, a load balancing 
application, a virtual private network application, a firewall application, a web switch, a 
network security application, a proxy application, and a database application (col. 1, 
lines 1 1-20 and col. 3, lines 36-42). 

65. Regarding claim 57, Conklin et al. disclose a process for service addressing, the 
process comprising: 

• A step for receiving a data packet, the data packet including a service address 
and a service port identifier (col. 7, lines 44-50 and col. 3, lines 3-14); 
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• A step for identifying a bundle of network applications based at least in part on 
the service address, the bundle of network applications including at least a first 
network application and a second network application, the first network 
application being different from the second network application (col. 7, lines 44- 
50 and col. 3, lines 3-14); 

• A step for selecting the first network application based at least in part on the 
service port identifier (col. 7, lines 44-50 and col. 3, lines 3-14); and 

• A step for sending at least a portion of the data packet to the first network 
application (col. 7, lines 44-50 and col. 3, lines 3-14). 

66. Regarding claim 58, in accordance with claim 57, Conklin et al. disclose the 
process wherein: 

• The step for receiving a data packet includes a step for receiving the data packet 
via a first network interface (col. 7, lines 44-50 and col. 3, lines 3-14); and 

• The step for selecting the first network application based at least in part on the 
service port identifier includes a step for selecting the first network application 
based at least in part on the sen/ice port identifier and the first network interface 
(col. 7, lines 44-50 and col. 3, lines 3-14). 

67. Regarding claim 59, in accordance with claim 57, Conklin et al. disclose the 
process wherein: 

• The step for receiving a data packet includes: 

o A step for receiving the data packet via a first network interface (col. 7, 
lines 44-50 and col. 3, lines 3-14), and 
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o A step for determining a data packet received network interface identifier 
based at least in part on receiving the data packet via the first network 
interface (col. 7. lines 44-50 and col. 3, lines 3-14); and 

• The step for selecting the first network application based at least in part on the 
service port identifier includes a step for selecting the first network application 
based at least in part on the service port identifier and the data packet received 
network interface identifier (col. 7, lines 44-50 and col. 3, lines 3-14). 

68. Regarding claim 60, in accordance with claim 57, Conklin et al. disclose the 
process wherein the first network application is a first version of a particular network 
application and the second network application is a second version of a particular 
network application (see Fig. 9). 

69. Regarding claim 61, in accordance with claim 60, Conklin et al, disclose the 
process wherein the particular network application is selected from the group consisting 
of an intrusion detection application, a virus detection application, a load balancing 
application, a virtual private network application, a firewall application, a web switch, a 
network security application, a proxy application, and a database application (col. 1 , 
lines 1 1-20 and col. 3, lines 36-42). 

70. Regarding claim 62, Conklin et al. disclose a computer-readable medium storing 
a plurality of instructions to be executed by a processor for service addressing, the 
plurality of instructions comprising instructions to: 

• Receive a data packet, the data packet including a service address and a service 
port identifier (col. 7, lines 44-50 and col. 3, lines 3-14); 
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• Identify a bundle of network applications based at least in part on the service 
address, the bundle of network applications including at least a first network 
application and a second network application, the first network application being 
different from the second network application (col. 7, lines 44-50 and col. 3, lines 
3-14); 

• Select the first network application based at least in part on the service port 
identifier (col. 7, lines 44-50 and col. 3, lines 3-14); and 

• Send at least a portion of the data packet to the first network application (col. 7, 
lines 44-50 and col. 3, lines 3-14). 

71 . Regarding claim 63, in accordance with claim 62, Conklin et al. disclose the 
computer-readable medium, wherein: 

• The instructions to receive a data packet include instructions to receive the data 
packet via a first network interface (col. 7, lines 44-50 and col. 3, lines 3-14); and 

• The instructions to select the first network application based at least in part on 
the service port identifier include instructions to select the first network 
application based at least in part on the service port identifier and the first 
network interface (col. 7, lines 44-50 and col. 3, lines 3-14). 

72. Regarding claim 64, in accordance with claim 62, Conklin et al. disclose the 
computer-readable medium wherein: 

• The instructions to receive a data packet include instructions to: 

o Receive the data packet via a first network interface (col. 7, lines 44-50 
and col. 3, lines 3-14), and 
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o Determine a data packet received network interface identifier based at 
least in part on receiving the data packet via the first network interface 
(col. 7, lines 44-50 and col. 3, lines 3-14); and 
• The instructions to select the first network application based at least in part on 
the service port identifier include instructions to select the first network 
application based at least in part on the service port identifier and the data packet 
received network interface identifier (col. 7, lines 44-50 and col. 3, lines 3-14). 

73. Regarding claim 65, in accordance with claim 62, Conklin et al. disclose the 
computer-readable medium wherein the first network application is a first 
implementation of a particular network application and the second network application is 
a second implementation of a particular network application (see Fig. 9). 

74. Regarding claim 66, in accordance with claim 65, Conklin et al. disclose the 
computer-readable medium wherein the particular network application is selected from 
the group consisting of an intrusion detection application, a virus detection application, a 
load balancing application, a virtual private network application, a firewall application, a 
web switch, a network security application, a proxy application, and a database 
application (col. 1 , lines 1 1-20 and col. 3, lines 36-42). 

Conclusion 

75. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

Gleichauf et al. (U.S. 6,499,107) disclose a method and system for adaptive 
network security using intelligent packet analysis. 
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Shanklin et al. (U.S. 6,578,147) disclose parallel intrusion detection sensors with 
load balancing for high-speed networks. 

Lyon et al. (U.S. 5,920,705) disclose a method and apparatus for dynamically 
shifting between routing and switching packets in a transmission network. 
Kalajan (U.S. 6,304,908) discloses a mechanism for delivering a message based 
upon a source address. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Benjamin A. Ailes, whose telephone number is 
(571)272-3899. The examiner can normally be reached on Monday-Friday (7:30-5). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supen/isor. Jack Harvey can be reached at (571)272-3896. The fax phone number for 
the organization where this application or proceeding is assigned is (703)872-3906. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 

Communications via Internet e-mail regarding this application, other than those 
under 35 U.S.C. 132 or which otherwise require a signature, may be used by the 
applicant and should be addressed to [benjamin.ailes@uspto.gov]. 



Application/Control Number: 09/930,142 



Page 26 



Art Unit: 2142 

All Internet e-mail communications will be made of record in the application file. 
PTO employees do not engage in Internet communications where there exists a 
possibility that sensitive information could be identified or exchanged unless the record 
includes a properly signed express waiver of the confidentiality requirements of 35 
U.S.C. 122. This is more clearly set forth in the Interim Internet Usage Policy published 
In the Official Gazette of the Patent and Trademark on February 25, 1997 at 1 195 OG 
89. 

Benjamin Ailes fj 
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